A week in security (March 9 – March 15)

Last week on Malwarebytes Labs: Watch out for fake Malwarebytes renewal notices in your calendar Google patches two Chrome zero-days under active attack. Update now Attackers impersonate Temu in ClickFix $Temu airdrop scam Apple patches Coruna exploit kit flaws for older iOS versions This Android...

A week in security (November 24 – November 30)

Last week on Malwarebytes Labs: How CVSS v4.0 works: characterizing and scoring vulnerabilities Millions at risk after nationwide CodeRED alert system outage and data breach Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks Fake LinkedIn jobs trick Mac users in...

Malicious code in onepush-browser-notifications (npm)

The package onepush-browser-notifications was found to contain malicious code...

MAL-2025-28238 Malicious code in onepush-browser-notifications (npm)

The package onepush-browser-notifications was found to contain malicious code...

This Week in Security News - August 6, 2021

This week, learn how false advertisers use spam browser notifications to gain ad revenue. Also, read about the results from Trend Micro’s first half 2021 biannual Cyber Risk Index report...

Google Chrome Forgery Vulnerability (CNVD-2019-38234)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 78.0.3904.70, which stems from the program not properly handling browser notifications. The vulnerability can be exploited by an attacker to spoof the content of a...